4

CVE-2010-2426

Exploit
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Southrivertech ≫ Titan Ftp Server Version <= 8.10.1125
Southrivertech ≫ Titan Ftp Server Version 1.0.17
Southrivertech ≫ Titan Ftp Server Version 1.0.18
Southrivertech ≫ Titan Ftp Server Version 1.0.19
Southrivertech ≫ Titan Ftp Server Version 1.0.20
Southrivertech ≫ Titan Ftp Server Version 1.0.21
Southrivertech ≫ Titan Ftp Server Version 1.0.22
Southrivertech ≫ Titan Ftp Server Version 1.0.23
Southrivertech ≫ Titan Ftp Server Version 1.0.24
Southrivertech ≫ Titan Ftp Server Version 1.0.25
Southrivertech ≫ Titan Ftp Server Version 1.0.26
Southrivertech ≫ Titan Ftp Server Version 1.0.27
Southrivertech ≫ Titan Ftp Server Version 1.0.28
Southrivertech ≫ Titan Ftp Server Version 1.0.29
Southrivertech ≫ Titan Ftp Server Version 1.0.30
Southrivertech ≫ Titan Ftp Server Version 1.0.31
Southrivertech ≫ Titan Ftp Server Version 1.1.33
Southrivertech ≫ Titan Ftp Server Version 1.11.34
Southrivertech ≫ Titan Ftp Server Version 2.0.44 Update beta
Southrivertech ≫ Titan Ftp Server Version 2.00.95
Southrivertech ≫ Titan Ftp Server Version 2.01.96
Southrivertech ≫ Titan Ftp Server Version 2.02.99
Southrivertech ≫ Titan Ftp Server Version 2.10.119
Southrivertech ≫ Titan Ftp Server Version 2.10.120
Southrivertech ≫ Titan Ftp Server Version 2.10.121
Southrivertech ≫ Titan Ftp Server Version 2.11.132
Southrivertech ≫ Titan Ftp Server Version 2.20.140
Southrivertech ≫ Titan Ftp Server Version 2.21.142
Southrivertech ≫ Titan Ftp Server Version 2.30.151
Southrivertech ≫ Titan Ftp Server Version 2.31.152
Southrivertech ≫ Titan Ftp Server Version 2.40.155
Southrivertech ≫ Titan Ftp Server Version 3.00.162
Southrivertech ≫ Titan Ftp Server Version 3.01.163
Southrivertech ≫ Titan Ftp Server Version 3.02.165
Southrivertech ≫ Titan Ftp Server Version 3.10.169
Southrivertech ≫ Titan Ftp Server Version 3.12.172
Southrivertech ≫ Titan Ftp Server Version 3.20.175
Southrivertech ≫ Titan Ftp Server Version 3.21.177
Southrivertech ≫ Titan Ftp Server Version 3.22.178
Southrivertech ≫ Titan Ftp Server Version 3.30.186
Southrivertech ≫ Titan Ftp Server Version 4.00.245
Southrivertech ≫ Titan Ftp Server Version 4.01.246
Southrivertech ≫ Titan Ftp Server Version 4.02.248
Southrivertech ≫ Titan Ftp Server Version 4.03.249
Southrivertech ≫ Titan Ftp Server Version 4.05.252
Southrivertech ≫ Titan Ftp Server Version 4.10.256
Southrivertech ≫ Titan Ftp Server Version 4.11.257
Southrivertech ≫ Titan Ftp Server Version 4.13.260
Southrivertech ≫ Titan Ftp Server Version 4.14.261
Southrivertech ≫ Titan Ftp Server Version 4.20.263
Southrivertech ≫ Titan Ftp Server Version 4.21.264
Southrivertech ≫ Titan Ftp Server Version 4.22.265
Southrivertech ≫ Titan Ftp Server Version 4.23.266
Southrivertech ≫ Titan Ftp Server Version 4.30.269
Southrivertech ≫ Titan Ftp Server Version 4.31.272
Southrivertech ≫ Titan Ftp Server Version 5.00.303
Southrivertech ≫ Titan Ftp Server Version 5.01.306
Southrivertech ≫ Titan Ftp Server Version 5.02.307
Southrivertech ≫ Titan Ftp Server Version 5.03.308
Southrivertech ≫ Titan Ftp Server Version 5.03.309
Southrivertech ≫ Titan Ftp Server Version 5.03.310
Southrivertech ≫ Titan Ftp Server Version 5.04.311
Southrivertech ≫ Titan Ftp Server Version 5.04.312
Southrivertech ≫ Titan Ftp Server Version 5.04.313
Southrivertech ≫ Titan Ftp Server Version 5.04.314
Southrivertech ≫ Titan Ftp Server Version 5.04.315
Southrivertech ≫ Titan Ftp Server Version 5.05.316
Southrivertech ≫ Titan Ftp Server Version 5.05.317
Southrivertech ≫ Titan Ftp Server Version 5.05.318
Southrivertech ≫ Titan Ftp Server Version 5.05.319
Southrivertech ≫ Titan Ftp Server Version 5.05.320
Southrivertech ≫ Titan Ftp Server Version 5.05.321
Southrivertech ≫ Titan Ftp Server Version 5.05.322
Southrivertech ≫ Titan Ftp Server Version 5.05.323
Southrivertech ≫ Titan Ftp Server Version 5.05.324
Southrivertech ≫ Titan Ftp Server Version 5.05.325
Southrivertech ≫ Titan Ftp Server Version 5.05.326
Southrivertech ≫ Titan Ftp Server Version 5.05.327
Southrivertech ≫ Titan Ftp Server Version 5.10.328
Southrivertech ≫ Titan Ftp Server Version 5.10.329
Southrivertech ≫ Titan Ftp Server Version 5.11.330
Southrivertech ≫ Titan Ftp Server Version 5.11.331
Southrivertech ≫ Titan Ftp Server Version 5.12.332
Southrivertech ≫ Titan Ftp Server Version 5.12.333
Southrivertech ≫ Titan Ftp Server Version 5.12.334
Southrivertech ≫ Titan Ftp Server Version 5.12.335
Southrivertech ≫ Titan Ftp Server Version 5.12.336
Southrivertech ≫ Titan Ftp Server Version 5.20.342
Southrivertech ≫ Titan Ftp Server Version 5.21.347
Southrivertech ≫ Titan Ftp Server Version 5.22.350
Southrivertech ≫ Titan Ftp Server Version 5.23.351
Southrivertech ≫ Titan Ftp Server Version 5.24.352
Southrivertech ≫ Titan Ftp Server Version 5.25.356
Southrivertech ≫ Titan Ftp Server Version 5.26.361
Southrivertech ≫ Titan Ftp Server Version 5.27.362
Southrivertech ≫ Titan Ftp Server Version 5.30.367
Southrivertech ≫ Titan Ftp Server Version 5.31.373
Southrivertech ≫ Titan Ftp Server Version 5.32.376
Southrivertech ≫ Titan Ftp Server Version 5.33.380
Southrivertech ≫ Titan Ftp Server Version 5.33.381
Southrivertech ≫ Titan Ftp Server Version 5.35.385
Southrivertech ≫ Titan Ftp Server Version 5.36.386
Southrivertech ≫ Titan Ftp Server Version 5.37.387
Southrivertech ≫ Titan Ftp Server Version 5.38.388
Southrivertech ≫ Titan Ftp Server Version 5.39.389
Southrivertech ≫ Titan Ftp Server Version 6.00.492
Southrivertech ≫ Titan Ftp Server Version 6.01.512
Southrivertech ≫ Titan Ftp Server Version 6.03.537
Southrivertech ≫ Titan Ftp Server Version 6.04.545
Southrivertech ≫ Titan Ftp Server Version 6.05.550
Southrivertech ≫ Titan Ftp Server Version 6.06.555
Southrivertech ≫ Titan Ftp Server Version 6.10.560
Southrivertech ≫ Titan Ftp Server Version 6.20.587
Southrivertech ≫ Titan Ftp Server Version 6.21.596
Southrivertech ≫ Titan Ftp Server Version 6.23.616
Southrivertech ≫ Titan Ftp Server Version 6.24.621
Southrivertech ≫ Titan Ftp Server Version 6.25.622
Southrivertech ≫ Titan Ftp Server Version 6.26.630
Southrivertech ≫ Titan Ftp Server Version 7.00
Southrivertech ≫ Titan Ftp Server Version 7.01
Southrivertech ≫ Titan Ftp Server Version 7.02
Southrivertech ≫ Titan Ftp Server Version 7.10
Southrivertech ≫ Titan Ftp Server Version 7.12
Southrivertech ≫ Titan Ftp Server Version 8.00
Southrivertech ≫ Titan Ftp Server Version 8.01
Southrivertech ≫ Titan Ftp Server Version 8.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.26% 0.957
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://secunia.com/advisories/40237
Vendor Advisory
http://www.securityfocus.com/bid/40949
Exploit
http://osvdb.org/65533
http://www.securityfocus.com/archive/1/511839/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/59492